infisical-pki
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for downloading the Infisical Key Storage Provider (KSP) binary from the vendor's official GitHub repository.
- Evidence:
Invoke-WebRequest -Uri "https://github.com/Infisical/infisical-ksp/releases/latest/download/infisical-ksp.dll"inreferences/code-signing.md. - [COMMAND_EXECUTION]: Includes standard instructions for installing and configuring native security modules and libraries.
- Evidence: Configuration of
INFISICAL_CONFIGand registration of DLLs inreferences/code-signing.md. - [PRIVILEGE_ESCALATION]: Describes the use of
sudoto install the PKCS#11 module into standard system library directories on Linux and macOS. - Evidence:
sudo cp libinfisical-pkcs11.so /usr/local/lib/andsudo chmod 755inreferences/code-signing.md.
Audit Metadata